Enforcing multifactor authentication on a primary or a media server instance
By default, multifactor authentication is optional. However, the appadmin user can enforce it for all users on the application instance.
Use the following procedures to enforce or stop enforcing multifactor authentication on a primary or a media server instance.
To enforce multifactor authentication on a primary or a media server instance
- Log in to the instance as the appadmin user.
- Run the following command:
/usr/openv/netbackup/bin/goodies/nbmfacfg -setenforce 1 [-grace-period <days>]
Where [-grace-period <days>] is an optional parameter to specify the number of days before users are forced to configure multifactor authentication before they can log in. If you do not include this parameter, the default of 90 days is used.
For example:
/usr/openv/netbackup/bin/goodies/nbmfacfg -setenforce 1 -grace-period 30
To stop enforcing multifactor authentication on a primary or a media server instance
- Log in to the instance as the appadmin user.
- Run the following command:
/usr/openv/netbackup/bin/goodies/nbmfacfg -setenforce 0